Summary: | <media-libs/openjpeg-1.5.1: JPEG2000 Image Processing Buffer Overflow Vulnerability (CVE-2012-3535) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | graphics+disabled |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://secunia.com/advisories/50360/ | ||
Whiteboard: | B2 [glsa] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 472536 | ||
Bug Blocks: |
Description
Agostino Sarubbo
2012-09-03 10:28:55 UTC
Note: this is not CVE-2012-3358 ( bug 425772 ) CVE-2012-3535 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3535): Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file. GLSA request filed. This issue was resolved and addressed in GLSA 201310-07 at http://security.gentoo.org/glsa/glsa-201310-07.xml by GLSA coordinator Sean Amoss (ackle). |